Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
File:                     go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json)
Hash identifier:          N2WN8uyCRylb7aZxRGBQauB9i23JaLqGG4vCnv5esrg=
Subject key identifier:   80:90:FA:11:30:C6:54:C7:59:D6:5F:73:BC:50:BA:03:C1:98:38:15
Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
Certificate issuer:       /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Certificate serial:       01988B102135788C1244AA15F563C5651FEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
Manifest number:          060F
Signing time:             Fri 08 Aug 2025 19:02:26 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:26 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:26 +0000
Files and hashes:         1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: pl/wQqEdSCXTEX/OY9FdH2gCsgsMJjhkYfjn6AfgI/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:21:35:78:8c:12:44:aa:15:f5:63:c5:65:1f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
        Validity
            Not Before: Aug  8 19:02:26 2025 GMT
            Not After : Aug  9 19:02:26 2025 GMT
        Subject: CN=8090fa1130c654c759d65f73bc50ba03c1983815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:fc:70:1e:d8:56:d9:0c:37:4d:0e:de:b0:
                    78:cd:a5:15:cd:a1:26:8f:8b:b4:8a:d9:4d:04:df:
                    eb:71:39:37:78:b5:c4:2c:bd:2f:67:e8:fb:ef:ea:
                    fb:93:bd:ef:22:6e:73:0a:15:da:1e:61:49:a5:f1:
                    b5:7e:b8:b7:a5:a1:0b:2b:95:fb:df:1d:ab:0d:ad:
                    8f:12:7f:e6:cc:f1:08:f6:85:3c:81:99:ef:db:a0:
                    da:d3:20:87:c9:d7:11:ec:f5:a5:fb:a3:49:dc:7d:
                    9a:33:b3:8f:f9:99:eb:4f:89:f2:8f:4f:6e:ed:a3:
                    ee:cd:f1:05:f0:f9:a1:c4:83:d7:58:08:0d:d4:4e:
                    b9:2d:a1:ef:e6:30:e7:ea:10:85:d6:1c:62:dc:40:
                    43:85:a8:b7:69:1c:d5:11:77:f3:84:4a:89:78:3c:
                    f2:04:60:57:96:20:dc:59:bd:2a:cb:be:6c:40:da:
                    2f:79:bd:e8:f2:42:5d:0b:eb:9a:89:a4:df:24:48:
                    f6:9a:86:19:5d:77:df:60:1d:09:9b:42:fa:32:5a:
                    93:fa:27:21:a3:11:c4:f5:33:89:81:dd:83:d0:df:
                    dd:9a:07:47:40:c5:5b:18:75:87:c8:76:41:c8:08:
                    aa:1d:72:3d:6a:18:6e:6e:3e:73:00:d4:12:ad:89:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:90:FA:11:30:C6:54:C7:59:D6:5F:73:BC:50:BA:03:C1:98:38:15
            X509v3 Authority Key Identifier:
                keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:d4:c7:bd:f6:f4:b5:e8:18:10:a3:a8:44:d6:2e:43:a2:
         1a:5f:5d:a8:c3:0c:f4:04:2c:c1:e4:18:11:79:9e:b5:32:43:
         dc:4b:5b:8c:7f:6e:a1:ce:80:41:0a:61:27:d5:cc:f8:c9:89:
         76:05:64:cb:33:17:67:eb:3a:ab:2c:e5:83:21:f4:e5:d7:ed:
         c3:3a:32:ed:83:f5:c6:39:30:d5:3d:34:eb:6f:96:f4:71:e2:
         f1:4b:0e:83:40:8c:dd:17:bc:5e:a5:a2:be:46:63:f4:64:e0:
         ae:6f:1b:eb:a0:5b:2a:3f:a3:7e:de:09:73:a7:9d:65:d5:64:
         d1:6b:36:e4:de:82:bf:9c:a3:5b:38:17:72:d2:40:5d:26:b7:
         3a:5c:4a:72:30:63:2c:06:fe:76:a4:df:6c:97:6e:42:7b:ea:
         36:8f:a0:82:2b:45:93:b6:c3:c2:ca:8f:db:92:07:34:40:45:
         24:9b:b6:ee:2b:4b:f9:89:f4:a8:89:5d:a5:31:ec:71:bf:18:
         04:4c:20:b1:f6:c5:51:17:6f:a7:b3:0b:21:b4:29:e7:3f:0a:
         d2:0c:d9:81:e0:8e:85:29:15:6e:71:f5:b5:68:67:9e:4d:ef:
         3c:8a:29:f2:24:c8:fe:59:ba:f2:73:a2:c8:6c:89:37:cf:49:
         f7:92:55:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLECE1eIwSRKoV9WPFZR/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyOGUxYWM3OGU3NmI2ODdkZDU2MDVmMmZiODFmZGQ1YWFm
ZWI3NDEwHhcNMjUwODA4MTkwMjI2WhcNMjUwODA5MTkwMjI2WjAzMTEwLwYDVQQD
Eyg4MDkwZmExMTMwYzY1NGM3NTlkNjVmNzNiYzUwYmEwM2MxOTgzODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXz8cB7YVtkMN00O3rB4zaUVzaEm
j4u0itlNBN/rcTk3eLXELL0vZ+j77+r7k73vIm5zChXaHmFJpfG1fri3paELK5X7
3x2rDa2PEn/mzPEI9oU8gZnv26Da0yCHydcR7PWl+6NJ3H2aM7OP+ZnrT4nyj09u
7aPuzfEF8PmhxIPXWAgN1E65LaHv5jDn6hCF1hxi3EBDhai3aRzVEXfzhEqJeDzy
BGBXliDcWb0qy75sQNoveb3o8kJdC+uaiaTfJEj2moYZXXffYB0Jm0L6MlqT+ich
oxHE9TOJgd2D0N/dmgdHQMVbGHWHyHZByAiqHXI9ahhubj5zANQSrYlUDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICQ+hEwxlTHWdZfc7xQugPBmDgVMB8GA1UdIwQY
MBaAFIKOGseOdraH3VYF8vuB/dWq/rdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYt
ZDA2ZTdjNjkyZDhiLzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYtZDA2ZTdjNjkyZDhi
LzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhzUx732
9LXoGBCjqETWLkOiGl9dqMMM9AQsweQYEXmetTJD3EtbjH9uoc6AQQphJ9XM+MmJ
dgVkyzMXZ+s6qyzlgyH05dftwzoy7YP1xjkw1T0062+W9HHi8UsOg0CM3Re8XqWi
vkZj9GTgrm8b66BbKj+jft4Jc6edZdVk0Ws25N6Cv5yjWzgXctJAXSa3OlxKcjBj
LAb+dqTfbJduQnvqNo+ggitFk7bDwsqP25IHNEBFJJu27itL+Yn0qIldpTHscb8Y
BEwgsfbFURdvp7MLIbQp5z8K0gzZgeCOhSkVbnH1tWhnnk3vPIop8iTI/lm68nOi
yGyJN89J95JVZg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:38 2025 by rpki-client